☰
✕
✕

Mongodb data being held on compensation

If you are using MongoDB, you might want to check to make sure you have it configured properly or better yet, that you are running the latest and greatest to avoid finding it wiped and your data being held for ransom.


A hacker who goes by the name Harak1r1 is attacking unprotected MongoDB installations, wiping their content and installing a ransom note in place of the the stolen data. The cost to get the data returned is 0.2 bitcoin, which comes to about $203. If that sounds cheap, it isn' t. Not if you are deploying multiple Mongo databases and they all get hit which has been happening.


At last count an estimated 2,000 databases had been affected by the attack, and Gevers warns identified victims to check for other modifications.

" Criminals often target open databases to deploy their activities like data theft/ransom. But we also have seen cases where open servers like these are used for hosting malware (like ransomware), botnets and for hiding files in the GridFS."

Tag : Mongodb
FAQ
Q
Is MongoDB a relational database?
A
MongoDB is a document-oriented database. Instead of storing your data in tables made out of individual rows, as a relational database does, it stores your data in collections made out of individual documents.
Q
Does MongoDB have tables?
A
MongoDB database stores its data in collections. A collection holds one or more BSON documents. Documents are analogous to records or rows in a relational database table.
Q
Is any MongoDB data transferred by the Automation Agent?
A
Agents do not transmit any data records from a MongoDB deployment. The agents only communicate deployment configuration information and MongoDB logs.
Q
Does MongoDB support ACID transactions?
A
Yes. MongoDB 4.0 added support for multi-document ACID transactions.
Q
What does the leaf mean in the MongoDB logo?
A
Our founders believe that coding should be natural, and so should use a database. They want the experience of using MongoDB to be simple and natural.